diff --git a/Makefile b/Makefile
index 3d5e205..5081e34 100644
--- a/Makefile
+++ b/Makefile
@@ -11,12 +11,7 @@ compose:
 infra:
 	cd infra/${env} && terragrunt apply --all
 
-bootstrap: platform
-	# TODO needs to wait for namespaces e.g. vault
-	toolbox secrets \
-		--settings settings.yaml \
-		--hosts-file infra/_modules/nixos/hosts.json \
-		--host kube-1
+bootstrap: platform secrets
 
 platform:
 	toolbox gitops \
@@ -24,6 +19,12 @@ platform:
 		--hosts-file infra/_modules/nixos/hosts.json \
 		--host kube-1
 
+secrets:
+	toolbox secrets \
+		--settings settings.yaml \
+		--hosts-file infra/_modules/nixos/hosts.json \
+		--host kube-1
+
 apps:
 	# TODO multiple env
 	@temporal workflow start \